npm scope
@solana-labs
LPM Firewall blocks 4 packages in the @solana-labs npm scope.
Jun 30, 2026
@solana-labs/ancor@1.0.9
MalwareOSV/OpenSSF confirms @solana-labs/ancor@1.0.9 as malicious package MAL-2026-5786. Malicious code in @solana-labs/ancor (npm)
Jun 30, 2026
@solana-labs/etherjs@1.98.112
MalwareOSV/OpenSSF confirms @solana-labs/etherjs@1.98.112 as malicious package MAL-2026-5362. Malicious code in @solana-labs/etherjs (npm)
Jun 30, 2026
@solana-labs/spl-toke@1.98.112
MalwareOSV/OpenSSF confirms @solana-labs/spl-toke@1.98.112 as malicious package MAL-2026-5787. Malicious code in @solana-labs/spl-toke (npm)
Jun 30, 2026
@solana-labs/web3js@1.0.8
MalwareOSV/OpenSSF confirms @solana-labs/web3js@1.0.8 as malicious package MAL-2026-5788. Malicious code in @solana-labs/web3js (npm)
Each card opens the package page with its evidence and every recorded version.